

Application No. 


Applicant(s) ^^j^ 


Notice of Allowability 


09/415,293 


CARTER. EARL T. 


Examiner 


Art Unit 






Abdul hakim Nobahar 


2132 





" The MAILING DATE of this communication appears on the cover sheet with the correspondence address-- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . 13 This communication is responsive to 21 July 2004 . 

2. [3 The allowed claim(s) is/are 1-17 and 19-21 . 

3. 13 The drawings filed on 08 October 1999 are accepted by the Examiner. 

4. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) □ All b) □ Some* c) □ None of the: 

1. D Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

5. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

6. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1 ) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the bacic) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 
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Allowable Subject Matter 

1. Claims 1-17 and 19-21 are allowed. 

2. The following is an examiner's statement of reasons for allowance: 

3. The primary reasons for the allowance of the independent claims 1, 7, 13, 14 and 
20 are the inclusion of the following limitations that are not found in the prior art and 
they are uniquely distinct features. The closest prior art are Hile et al. (5,31 9,776) and 
Anisbury et al (6,078,924). Hile et al. discloses a method for preventing the spread of a 
virus during data transfer into a computer system. Hile et al buffers the incoming data 
stream and then checks the data stream character by character against virus signature 
strings in a state machine utilizing a state table that includes the current state of the 
machine. If a virus signature is detected the user is alerted and the storage of data onto 
destination medium is terminated. Anisbury teaches a system that provides an 
information platform that automates the collection of data, provides a method for 
organizing the library of information and provides analysis using multiple content-types, 
thereby providing user with a market understanding necessary to execute rapid and 
knowledgeable decision-making. These two arts, singularly or in combination, fail to 
anticipate or render the following limitations within the context of the whole claim(s): 
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"Claim 1: receiving an input stream comprising a first plurality of characters, a 
second plurality of characters, and at least one variable character between the first 
plurality and second plurality of characters, wherein the first plurality and the second 
plurality of characters together constitute a REGEX signature." 

"Claim 7: receive an input stream, the input stream comprising a first plurality of 
characters, a second plurality of characters, and at least one variable character 
between the first plurality and the second plurality of characters, wherein the first 
plurality and the second plurality of characters together constitute a REGEX signature." 

"Claim 13: a network interface for receiving an input stream comprising a first 
plurality of characters, a second plurality of characters, and at least one variable 
character between the first plurality and the second plurality of characters, wherein the 
first plurality and the second plurality of characters together constitute a REGEX 
signature." 

"Claim 14: receive an input stream comprising a first plurality of characters, a 
second plurality of characters, and at least one variable character between the first 
plurality and the second plurality of characters, wherein the first plurality and the second 
plurality of characters together constitute a REGEX signature." 
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"Claim 20: means for receiving an input stream comprising a first plurality of 
characters, a second plurality of characters, and at least one variable character 
between the first plurality and the second plurality of characters, wherein the first 
plurality and the second plurality of characters together constitute a REGEX signature." 

4. The dependent claims 2-6, 8-12, 15-17, 19 and 21 are allowed because they are 
dependent on the allowed parent claims. 

5. Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

6. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Abdulhakim Nobahar whose telephone number is 703- 
305-8074. The examiner can normally be reached on M-F 8-5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone numbers 
for the organization where this application or proceeding is assigned are 703-746-7239 
for regular communications and 703-746-7238 for After Final communications. 
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Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 703-305- 
3900. 

Abdulhakim Nobahar 




November 4, 2004 
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